Bug 1881992

Summary:	Rebase SSSD for RHEL 8.4
Product:	Red Hat Enterprise Linux 8	Reporter:	Alexey Tikhonov <atikhono>
Component:	sssd	Assignee:	Alexey Tikhonov <atikhono>
Status:	CLOSED ERRATA	QA Contact:	Dan Lavu <dlavu>
Severity:	unspecified	Docs Contact:	lmcgarry
Priority:	high
Version:	8.3	CC:	dlavu, ed.dickson, grajaiya, jhrozek, lslebodn, mkosek, mzidek, pbrezina, pkettman, sgoveas, thalman, tscherf
Target Milestone:	rc	Keywords:	Rebase, Triaged
Target Release:	---	Flags:	pm-rhel: mirror+
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	sync-to-jira
Fixed In Version:	sssd-2.4.0-1.el8	Doc Type:	Deprecated Functionality
Doc Text:	.The SSSD version of libwbclient has been deprecated The SSSD implementation of the `libwbclient` package was added to allow the Samba `smbd` service to retrieve user and group information from AD without the need to run the `winbind` service. As Samba now requires that the `winbind` service is running and handling communication with AD, the related code has been removed from `smdb` for security reasons. As this additional required functionality is not part of SSSD and the SSSD implementation of `libwbclient` cannot be used with recent versions of Samba, the SSSD implementation of `libwbclient` is being deprecated.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-05-18 15:03:57 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1722842, 1734040, 1784459, 1791300, 1817122, 1819012, 1846778, 1873715, 1879860, 1881336, 1883488, 1884196, 1884205, 1884207, 1884213, 1884281, 1884301

Description Alexey Tikhonov 2020-09-23 14:34:14 UTC

Rebase SSSD in RHEL8 on the latest upstream release.


This is expected to bring following notable changes that might require explicit QE effort:


1) Already merged:
  * https://github.com/SSSD/sssd/issues/5199 : this is related to larger FreeIPA change https://github.com/freeipa/freeipa/pull/4792
  * https://github.com/SSSD/sssd/issues/4743 : "[RFE] Add "enabled" option to domain section"
  * https://github.com/SSSD/sssd/issues/5230 : "Deprecate SSSD's version of libwbclient"
  * https://github.com/SSSD/sssd/issues/4829 : "KCM: Increase the default client idle timeout, consider decreasing the timeout on busy servers"
  * https://github.com/SSSD/sssd/issues/1041 : "Drop support of libnss as a crypto backend" (relevant bz 1846778)
  * https://github.com/SSSD/sssd/issues/4840 : "gpo: use correct base dn"
  * https://github.com/SSSD/sssd/pull/5178 : "ldap: add new option ldap_library_debug_level"
  * https://github.com/SSSD/sssd/pull/5252 : "Add offline_timeout_max option to control offline interval backoff" (external contributor)

Additionally this will fix following existing BZs
  * bz 1784459 : "[RFE] tlog does not allow to exclude some users from session recording"
  * bz 1846778 : "[RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL"
  * bz 1879860 : "correction in sssd.conf:pam_response_filter man page "
  * bz 1791300 : "sporadic sssd_be crash on s390x"


2) Expected to be merged
  * https://github.com/SSSD/sssd/pull/5300 : "ad: use parallel cldap ping for site discovery" (upstream #3743 and #5215 - required for IPA-IPA trust)
  * https://github.com/SSSD/sssd/issues/5256 : bug fix for networks database support introduced in 8.3
  * https://github.com/SSSD/sssd/issues/5274 : "dyndns: asym auth for nsupdate" (external contributor)
  * https://github.com/SSSD/sssd/issues/4569 : "IFP: org.freedesktop.sssd.infopipe.GetUserGroups does not take SYSDB_PRIMARY_GROUP_GIDNUM into account"
  * https://github.com/SSSD/sssd/issues/5261 : "DN with white spaces" (RHEL7 bz 1859554 -- **but we don't have RHEL8 bz**; + bz 1817122)
  * https://github.com/SSSD/sssd/issues/5330 : "automount sssd issue when 2 automount maps have the same key" (bz 1873715)
  * https://github.com/SSSD/sssd/pull/5313 : "KCM: Fix SSH GSSAPI delegation for the memory back end" (bz 1722842)
  * https://github.com/SSSD/sssd/pull/5296 : "AD: "getAccountDomain" tweaks" (bz 1734040)
  * (probably) https://github.com/SSSD/sssd/pull/5264 : "Utils: White space replace with another character" (bz 1818671)
  * (probably) https://github.com/SSSD/sssd/pull/5245 : "RESOLV: Avoid DNS search to improve fail-over reaction" (bz 1608496)
  * (probably) https://github.com/SSSD/sssd/pull/5251 : "subdomains: allow to inherit case_sensitive=Preserving" (bz 1855320)

Comment 1 Alexey Tikhonov 2020-09-29 11:21:54 UTC

+ bz 1883488

Comment 2 Alexey Tikhonov 2020-09-30 13:47:32 UTC

+ bz 1881336

Comment 5 Alexey Tikhonov 2020-10-01 14:16:00 UTC

+ bz 1884196
+ bz 1884205
+ bz 1884207
+ bz 1884213

Comment 6 Alexey Tikhonov 2020-10-01 14:39:55 UTC

+ bz 1884281

Comment 7 Alexey Tikhonov 2020-10-01 15:41:29 UTC

+ bz 1884301

Comment 8 Alexey Tikhonov 2020-10-12 19:00:31 UTC

Upstream release: https://github.com/SSSD/sssd/releases/tag/sssd-2_4_0

Comment 16 Dan Lavu 2020-12-22 19:35:43 UTC

All the rebase bugs have been verified.

Comment 17 Peter Kettmann 2020-12-23 08:40:40 UTC

That's great, thank you.

Comment 24 errata-xmlrpc 2021-05-18 15:03:57 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (sssd bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:1666